$ rpki-client -vvf rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft File: CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft (raw, json) Hash identifier: I3HGo1nlf9+8SF5NS9kCbcyCkFie0fRAra/bLBbc1sM= Subject key identifier: 5D:8F:8B:06:14:74:B1:76:05:58:42:D9:B3:D0:83:F0:2E:12:DB:73 Authority key identifier: 0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 Certificate issuer: /CN=A9124679/serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft Manifest number: 01E1 Signing time: Fri 25 Apr 2025 02:03:03 +0000 Manifest this update: Fri 25 Apr 2025 02:03:03 +0000 Manifest next update: Fri 02 May 2025 02:03:03 +0000 Files and hashes: 1: CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl (hash: fOJKFv2IvtANncX10bJFBPoAqTa9ZComh06p0j81RTQ=) 2: F7D11060619811ED9437B344C4F9AE02.roa (hash: qAnnelNEaBIcl+tlBGt8/4Pa4w6K1hQge4BvLhS2BHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124679, serialNumber=0A480517741076FE763E4E9E32F35BD459893292 Validity Not Before: Apr 25 02:03:03 2025 GMT Not After : May 2 02:03:03 2025 GMT Subject: CN=680aed57-1570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cb:15:43:1e:9e:64:25:5c:cb:1f:79:c0:47: 02:ed:e3:69:d9:d3:4b:d5:d3:00:32:55:29:42:02: 42:57:53:a3:d5:d4:32:25:23:22:5a:d1:8d:4b:46: db:af:c3:db:af:b3:a9:14:42:9f:91:c3:aa:1c:3e: 11:13:db:42:39:39:8c:22:85:df:49:0c:42:3d:a1: 91:04:fa:8d:b5:c7:f8:8b:5f:b3:72:54:5c:fb:2a: b0:24:78:7c:16:83:9e:e8:92:bc:01:38:23:f0:3d: 5d:ec:01:d5:a0:06:3c:19:ec:02:6f:a4:d6:05:f0: 48:a2:56:f2:ed:a7:dc:39:ad:43:5e:a8:e0:08:23: 4b:00:e8:d6:bf:b6:ea:a5:0a:6e:ef:76:a7:0d:43: 67:4c:74:e4:2e:c8:c2:d2:ec:a1:ff:79:c7:c5:22: a9:80:79:2b:2e:a9:6b:45:03:9f:d1:f5:0b:e1:c9: 85:6f:1d:5b:ed:8b:d2:d5:ac:0c:98:81:93:65:90: 47:17:30:ef:29:b0:ff:20:41:13:a2:39:9a:7b:bd: f8:18:18:ac:51:c3:8e:b3:01:45:07:40:a8:0a:21: 36:05:86:1e:56:8c:60:64:a8:7b:28:49:94:dd:82: b1:d6:e9:f0:c0:a5:92:db:5a:39:8e:5e:d2:2e:43: 70:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8F:8B:06:14:74:B1:76:05:58:42:D9:B3:D0:83:F0:2E:12:DB:73 X509v3 Authority Key Identifier: keyid:0A:48:05:17:74:10:76:FE:76:3E:4E:9E:32:F3:5B:D4:59:89:32:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkgFF3QQdv52Pk6eMvNb1FmJMpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124679/F5B78A88619411ED8CDBA23EC4F9AE02/CkgFF3QQdv52Pk6eMvNb1FmJMpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:18:07:3f:70:3c:0d:1d:0d:d6:b6:3e:0a:a1:7f:8d:fa:e1: 11:5e:89:9e:d1:63:8a:c9:9b:f9:15:9c:d4:10:a5:c6:cf:ec: 0e:c2:45:1b:90:0c:69:9f:48:df:c2:49:17:98:0a:63:b0:83: 53:6a:26:5e:6e:74:f5:10:f4:a0:48:98:b0:b5:95:8a:c2:4a: f3:15:4d:e8:c2:7e:8f:fb:5d:68:8c:21:7b:46:24:83:9b:53: 33:a3:ca:9b:38:4b:1a:b9:ce:f9:0e:e3:f7:3b:d3:4f:14:03: f2:16:f8:69:49:62:14:05:1f:5b:e3:85:92:b2:91:3c:93:2d: 35:19:52:54:0f:6d:3f:66:73:f5:95:49:91:bb:61:70:83:7c: b6:bb:66:c9:12:76:c9:40:ce:2f:e4:f0:84:df:5d:b7:ef:02: 24:52:ba:fe:d4:28:cc:b8:c9:2c:66:c8:a4:fd:be:77:49:4d: 95:29:18:60:74:51:34:72:e5:9a:5f:28:62:37:75:dd:22:a5: 7b:de:69:5d:0b:ec:77:25:ca:a8:6c:7a:9e:5a:c3:12:fe:fb: c3:17:24:41:70:aa:55:e3:c0:e0:2e:3d:96:67:35:1c:a0:e6: c4:f5:7e:3c:df:83:bf:fb:86:84:83:ed:f1:ca:f5:f0:0e:39: fe:9c:83:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ2NzkxMTAvBgNVBAUTKDBBNDgwNTE3NzQxMDc2RkU3NjNFNEU5RTMyRjM1QkQ0 NTk4OTMyOTIwHhcNMjUwNDI1MDIwMzAzWhcNMjUwNTAyMDIwMzAzWjAYMRYwFAYD VQQDEw02ODBhZWQ1Ny0xNTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMsVQx6eZCVcyx95wEcC7eNp2dNL1dMAMlUpQgJCV1Oj1dQyJSMiWtGNS0bb r8Pbr7OpFEKfkcOqHD4RE9tCOTmMIoXfSQxCPaGRBPqNtcf4i1+zclRc+yqwJHh8 FoOe6JK8ATgj8D1d7AHVoAY8GewCb6TWBfBIolby7afcOa1DXqjgCCNLAOjWv7bq pQpu73anDUNnTHTkLsjC0uyh/3nHxSKpgHkrLqlrRQOf0fUL4cmFbx1b7YvS1awM mIGTZZBHFzDvKbD/IEETojmae734GBisUcOOswFFB0CoCiE2BYYeVoxgZKh7KEmU 3YKx1unwwKWS21o5jl7SLkNwYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2PiwYU dLF2BVhC2bPQg/AuEttzMB8GA1UdIwQYMBaAFApIBRd0EHb+dj5OnjLzW9RZiTKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDY3OS9GNUI3OEE4ODYx OTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2NTJQazZlTXZOYjFGbUpN cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrZ0ZGM1FRZHY1MlBrNmVNdk5iMUZtSk1wSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDY3OS9GNUI3OEE4ODYxOTQxMUVEOENEQkEyM0VDNEY5QUUwMi9Da2dGRjNRUWR2 NTJQazZlTXZOYjFGbUpNcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbGAc/cDwNHQ3Wtj4KoX+N+uERXome0WOKyZv5FZzUEKXGz+wOwkUb kAxpn0jfwkkXmApjsINTaiZebnT1EPSgSJiwtZWKwkrzFU3own6P+11ojCF7RiSD m1Mzo8qbOEsauc75DuP3O9NPFAPyFvhpSWIUBR9b44WSspE8ky01GVJUD20/ZnP1 lUmRu2Fwg3y2u2bJEnbJQM4v5PCE31237wIkUrr+1CjMuMksZsik/b53SU2VKRhg dFE0cuWaXyhiN3XdIqV73mldC+x3JcqobHqeWsMS/vvDFyRBcKpV48DgLj2WZzUc oObE9X4834O/+4aEg+3xyvXwDjn+nIOY -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:01 2025 by rpki-client